Made parsing of HTTP connection header more robust

miguelgrinberg · Aug 19, 2015 · f1ce5e0 · f1ce5e0
1 parent a85ac4c
commit f1ce5e0
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/engineio/socket.py b/engineio/socket.py
@@ -63,7 +63,9 @@ def send(self, pkt):
 
     def handle_get_request(self, environ, start_response):
         """Handle a long-polling GET request from the client."""
-        connections = environ.get('HTTP_CONNECTION', '').lower().split(',')
+        connections = [
+            s.strip()
+            for s in environ.get('HTTP_CONNECTION', '').lower().split(',')]
         transport = environ.get('HTTP_UPGRADE', '').lower()
         if 'upgrade' in connections and transport in self.upgrade_protocols:
             self.server.logger.info('%s: Received request to upgrade to %s',